Added a check_security decorator for convenience.
Altered/added docs and fixed a bug that was denying access to schemas.
Added better readonly field support for services, so now it shows up in the schema.
After some soul-searching, I decided that the CSRF check in SessionAuthenticate in tastypie is good enough for CSRF protection, and ApiKeyAuthenticate is good enough for API key protection. For the sake of less complexity, I'm removing the view-wrapping security check stuff.
Too bad. It had some nice code.