Refs #314 -- Read-only REST API (#513)

* initial commit

* API auth

* Hierarchical URLs

* Add session auth

* Strong hierarchy

* Add filters

* Add i18n fields, questions

* More viewsets and serializers

* Ticket download

* Add OrderPosition serializer

* View-level permissions

* More tests

* More tests

* Add basic API docs

* Add REST API to docs frontpage

* Tests for order endpoints

* Add invoice tests

* Voucher and waitinglist tests

* Doc draft

* order docs

* Docs on all viewsets

* Disable DRF docs, style sphinx, style browsable API

* Fix tests

* deprecated imports

* Test foo

* Attendee names

* Fix migration problems

* Remove browsable API, plugin integration

* Doc fixes

src/requirements/production.txt

@@ -1,11 +1,13 @@
 # Functional requirements
 Django>=1.11.*
+djangorestframework==3.6.*
 python-dateutil
 pytz
 django-bootstrap3==8.2.*
 django-formset-js-improved==0.5.0.1
 django-compressor==2.1.1
-django-hierarkey==1.0.*
+django-hierarkey==1.0.*,>=1.0.2
+django-filter==1.0.*
 reportlab==3.2.*
 PyPDF2==1.26.*
 easy-thumbnails==2.4.*
@@ -29,6 +31,9 @@ markdown
 bleach==2.*
 raven
 django-i18nfield>=1.0.1
+# API docs
+coreapi==2.3.*
+pygments
 # Stripe
 stripe==1.22.*
 # PayPal