Understanding authentication and permissions in Django the Django REST framework and RESTful Web Services