added sessions-based authentication for the API... essentially, you may only...

added sessions-based authentication for the API... essentially, you may only access this information if you are logged in

bookshare/settings/settings.py

@@ -79,6 +79,15 @@ INSTALLED_APPS = (
 
 CRISPY_TEMPLATE_PACK = 'bootstrap3'
 
+REST_FRAMEWORK = {
+    'DEFAULT_AUTHENTICATION_CLASSES': (
+        'rest_framework.authentication.SessionAuthentication',
+    ),
+    'DEFAULT_PERMISSION_CLASSES': (
+        'rest_framework.permissions.IsAuthenticated',
+    ),
+}
+
 MESSAGE_TAGS = {messages.ERROR: 'danger', }
 
 MIDDLEWARE_CLASSES = (