Django REST API Only authenticated users can do Update, Delete functionality. Not logged in users have only Read access.