django api: must provide queryset when using serializer