django rest framework tutorial part 4: http://www.django-rest-framework.org/tutorial/4-authentication-and-permissions