https://medium.com/@ewho.ruth2014/adding-authentication-and-permissions-to-the-drf-restaurant-api-04e84b411b59