Revise test on update unmodifiable fields.
Updated serializer. Replace custom scopeupdatemixin with read_only option.
Revise permission.
Added friends function.
Added TestUtil. (get_authorization_header)