Security issue with User-Restricted Resource Access

I found a security issue, the query should be updated with the auth_username_field even when a GET with no parameters is performed, a user should only see the items he created.
Test for GET with User-Restricted resource access
docstring for fix to PR#50
Changelog update
Merge branch 'tsileo-patch-1' into develop. Fixes security issue with
User-Restricted Resource access (see PR#50).