second attempt to add the VCF exporter

The VCF exporter finally generates output that can be used in R.
found it: http://www.django-rest-framework.org/api-guide/exceptions#permissiondenied