allow API access for logged in users

makes the "browsable API" useful

see https://www.django-rest-framework.org/topics/browsable-api/
2 jobs for update-ci in 2 minutes and 21 seconds (queued for 2 seconds)
latest