Looks like it's a matter of overridding the serializer class https://github.com/tomchristie/django-rest-framework/blob/0eec692f9a884a1b303910e2595eefcd5215dfff/rest_framework/authtoken/views.py#L19-L20