Move ModelSerializer field_mapping into an attribute for easier overriding.
Drop unused import
Auth is no longer lazy.  Closes #667.

More consistent auth failure behavior.
Release notes