change auth-middleware behavior: authenticated by token user will replac...

This change was caused by periodical confusing of anybody testing API. If the tester is logged in django-admin, the django-admin user displaces the token's one