Moved DRF authentication to middleware (bug 965930)

This is almost done but I wouldn't mind getting some eyes on it from the people east of me.

I can split out the region middleware changes so this patch is simply moving the auth logic to middleware. I also have 1 test failure I need to look at closer.