Added authentication to the REST API

BasicAuthentication allows connections from within Django with a Django user object logged in.
SessionAuthentication is there to support AJAX calls to the API. It authenticates through use of the session ID and CSRF token stored in a user's cookies.