Switch the order of the DEFAULT_AUTHENTICATION_CLASSES of DRF. GitLab issue #400.

Thanks to @NiceGuyIT for the report and research.

Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>

mayan/settings/base.py

@@ -256,9 +256,9 @@ INTERNAL_IPS = ('127.0.0.1',)
 # ---------- Django REST framework -----------
 REST_FRAMEWORK = {
     'DEFAULT_AUTHENTICATION_CLASSES': (
-        'rest_framework.authentication.BasicAuthentication',
-        'rest_framework.authentication.TokenAuthentication',
         'rest_framework.authentication.SessionAuthentication',
+        'rest_framework.authentication.TokenAuthentication',
+        'rest_framework.authentication.BasicAuthentication',
     ),
     'PAGE_SIZE': 10,
 }