feat: dont hardcode authentication_classes, permission_classes in durin.views