move default auth and pagination config into settings.py - no need for it to be in the viewset class