Use rest_framework’s authtoken for API authentication