add api authentication serializer, views, tests, default settings