diff --git a/nodeconductor/server/base_settings.py b/nodeconductor/server/base_settings.py
index <HASH>..<HASH> 100644
--- a/nodeconductor/server/base_settings.py
+++ b/nodeconductor/server/base_settings.py
@@ -46,6 +46,13 @@ MIDDLEWARE_CLASSES = (
 
 REST_FRAMEWORK = {
     'TEST_REQUEST_DEFAULT_FORMAT': 'json',
+    'DEFAULT_AUTHENTICATION_CLASSES': (
+        'rest_framework.authentication.BasicAuthentication',
+        'rest_framework.authentication.SessionAuthentication',
+    ),
+    'DEFAULT_PERMISSION_CLASSES': (
+        'rest_framework.permissions.IsAuthenticated',
+    )
 }
 
 ROOT_URLCONF = 'nodeconductor.server.urls'
Enabled basic and session authentication.

- NC-4
- Made all requests require authentication by default.