Use a DRF's Response, it's safer for apps data (bug 994304)