our V1 API based on tastypie now requires defusedxml