added FarmerPrivateSerializer - have basic field level permissions working for users with 'is_staff' flag set
changed to djangorestframework==2.4.4 in requirements.txt