update OGViewSetMixin to encapsulate all of what the rest framework does; example random GET request not linked to a model; update default permissions settings to IsAuthenticated, as not all API calls will necessarily be associated with models