First cut at converting auth to rest_toolkit.
Convert some of the regular views to rest_toolkit. Handle 500 errors in client.
ACLs and permissions.
Let's merge and move on.