integrate django's permissions with key auth
update tests
update docs