use csrftoken even when logged out
support rendering of field choices
detail view may be null
format time
context flag
debug nested serializers on save
look for split date/time
better support multiple attachment fields
validity lookup
fix subclassing
support custom value field