add django authorization to user resource
add authentication and authorization metadata to bookmark resource