Improve initial fixture.
Add IsAuthenticated perrmission to api views.
Add missing permissions to models.