Add DEFAULT_AUTHENTICATION_CLASSES to README

Remove SessionAuthentication and JSONRenderer from test runner