Hide private data for unauthenticated users
Add permissions to block unauthenticated users from private data
Use django.utils.timezone.now as default for apikey time

- We have timezone support turned on in the database, and Django
  warns when storing a naieve time. It's utility timezone.now is
  timezone-aware.
Add authentication to block weakly logged-in users from private data