  defusedxml>=0.3
  django-filter>=0.5.4
  django-oauth-plus>=2.0
  oauth2>=1.5.211
  django-oauth2-provider>=0.2.3
 
</s> remove             auth = None

        return (None, user, auth)
 </s> add             self._auth = None </s> remove             auth = api_settings.UNAUTHENTICATED_TOKEN()
 </s> add             self._auth = api_settings.UNAUTHENTICATED_TOKEN() </s> remove             user = None
 </s> add             self._user = None </s> remove             user = api_settings.UNAUTHENTICATED_USER()
 </s> add             self._user = api_settings.UNAUTHENTICATED_USER()
django-oauth2-provider>=0.2.4
  defusedxml>=0.3
  django-filter>=0.5.4
  django-oauth-plus>=2.0
  oauth2>=1.5.211
django-oauth2-provider>=0.2.4
keep keep keep keep replace
 request.user should be still be accessible in renderer context if authentication fails 
optionals.txt