Fix nested serializers with renamed fields

Nested serializers (with source='*') expand their fields into their parent serializer.

Unfortunately they do so without respecting the `source` of their own fields.

This fixes the issue and includes a test.