Added OAuth2 according to the REST Framework docs, but could not get it to work. Left the OAuth2 plumbing in there, but decided to move to Basic Auth to keep the project moving along. We could still ship this to production, but would have to enable SSL in the prod environment. We'd have to do the same for OAuth2, but with OAuth, we'd get the auth token once, and there would be no need to store the username/password on the client side. Better. We'll get OAuth implmented, eventually.