diff --git a/izaac/settings.py b/izaac/settings.py
index da94812..c0a9d69 100644
--- a/izaac/settings.py
+++ b/izaac/settings.py
@@ -40,12 +40,13 @@ CORS_ALLOW_ALL_ORIGINS = True
 # ]
 
 REST_FRAMEWORK = {
-    'DEFAULT_AUTHENTICATION_CLASSES': (
+    'DEFAULT_AUTHENTICATION_CLASSES': [
         'oauth2_provider.contrib.rest_framework.OAuth2Authentication',
-    ),
-    'DEFAULT_PERMISSION_CLASSES': (
+        'rest_framework.authentication.SessionAuthentication',
+    ],
+    'DEFAULT_PERMISSION_CLASSES': [
         'rest_framework.permissions.IsAuthenticated',
-    )
+    ]
 }
 
 OAUTH2_PROVIDER = {