Support for X-HTTP-Method-Override Header

OAuth support

Token scope permission class

PrimaryKeyRelatedField with OneToOneField serializes wrong object's id

Refs #702.

List deserialization

For work on handling errors when deserializing lists of objects.

Merge branch 'master' of https://github.com/bitmonkey/django-rest-framework into list-deserialization

Fixes #705.

For the awesome OAuth 2 support in #693.

GenericAPIView now applies filter_backend for list and retrieve api views

Before this commit only the MultipleObjectAPIView would apply a
filter_backend, leaving the SingleObjectAPIView to return objects you
might otherwise expect to have been filtered out.

It's worth mentioning that when a SingleObjectAPIView makes a request
for an object that should be excluded, a 404 is the expected result.

index of bad item in data plus usual errors dict