GenericAPIView now applies filter_backend for list and retrieve api views

Before this commit only the MultipleObjectAPIView would apply a
filter_backend, leaving the SingleObjectAPIView to return objects you
might otherwise expect to have been filtered out.

It's worth mentioning that when a SingleObjectAPIView makes a request
for an object that should be excluded, a 404 is the expected result.
Merge pull request #711 from toranb/master

GenericAPIView now applies filter_backend for list and retrieve api views
Correcy typo.
Add some simple numQueries tests.
More bits of cleanup
Added @dulaccc.

For the awesome OAuth 2 support in #693.
Docs on per-object filtering
authtoken abstract if not installed.

Fixes #705.
Merge branch 'master' of https://github.com/bitmonkey/django-rest-framework into list-deserialization
Tweak implementation, and use FormSet style errors
Added @bitmonkey.  Thanks!

For work on handling errors when deserializing lists of objects.
Py3k fixes.
Merge pull request #716 from tomchristie/list-deserialization

List deserialization
Update release notes
Fixes for auth header checking.
Merge
Fix crazy typo.
Neater override hooks and more docs for DjangoModelPermissions.

Refs #702.
Update release notes.
Docs polishing.