get_nonce() change from APIAuthenticationPolicy method to security module's method
add effective_principals()
add some view and acl
add TemplateTestCase
add some api view