Do you mean the `data` bit or the `force_auth`?

`data` should be in all requests, `force_auth` is specific to DRF