Update README.md

Author: Juan Benitez

README.md

@@ -2,14 +2,17 @@
 [Django REST framework](http://www.django-rest-framework.org/) is a powerful and flexible toolkit for building Web APIs.
 
 ## Requirements
-- Pythton 3.6
+- Python 3.6
 - Django (1.10, 1.11, 2.0)
 - Django REST Framework
+- Django Rest Auth
 
 ## Installation
 ```
 	pip install django
 	pip install djangorestframework
+	pip install django-rest-auth
+	pip install django-allauth
 ```
 
 ## Structure
@@ -47,12 +50,36 @@ we get:
 ```
 Instead, if we try to access with credentials:
 ```
-	http -a root:root1234 http://127.0.0.1:8000/api/v1/movies/3
+	http http://127.0.0.1:8000/api/v1/movies/3 "Authorization: Token 7530ec9186a31a5b3dd8d03d84e34f80941391e3"
 ```
 we get the movie with id = 3
 ```
 {  "title":  "Avengers",  "genre":  "Superheroes",  "year":  2012,  "creator":  "admin"  }
 ```
+
+## Login and Tokens
+
+To get a token first we have to login
+```
+	http http://127.0.0.1:8000/rest-auth/login/ username="admin" password="root1234"
+```
+after that, we get the token
+```
+{
+    "key": "2d500db1e51153318e300860064e52c061e72016"
+}
+```
+**ALL request must be authenticated with a valid token, otherwise they will be invalid**
+
+We can create new users. (password1 and password2 must be equal)
+```
+http POST http://127.0.0.1:8000/rest-auth/registration/ username="USERNAME" password1="PASSWORD" password2="PASSWORD"
+```
+And we can logout, the token must be your actual token
+```
+http POST http://127.0.0.1:8000/rest-auth/logout/ "Authorization: Token <YOUR_TOKEN>" 
+```
+
 The API have some restrictions:
 -   The movies are always associated with a creator (user who created it).
 -   Only authenticated users may create and see movies.
@@ -61,11 +88,11 @@ The API have some restrictions:
 
 ### Commands
 ```
-http -a root:root1234 http://127.0.0.1:8000/api/v1/movies/
-http -a root:root1234 GET http://127.0.0.1:8000/api/v1/movies/3
-http -a root:root1234 POST http://127.0.0.1:8000/api/v1/movies/ title="Ant Man and The Wasp" genre="Action" year=2018
-http -a root:root1234 PUT http://127.0.0.1:8000/api/v1/movies/3 title="AntMan and The Wasp" genre="Action" year=2018
-http -a root:root1234 DELETE http://127.0.0.1:8000/api/v1/movies/3
+http http://127.0.0.1:8000/api/v1/movies/ "Authorization: Token <YOUR_TOKEN>"
+http GET http://127.0.0.1:8000/api/v1/movies/3 "Authorization: Token <YOUR_TOKEN>"
+http POST http://127.0.0.1:8000/api/v1/movies/ "Authorization: Token <YOUR_TOKEN>" title="Ant Man and The Wasp" genre="Action" year=2018
+http PUT http://127.0.0.1:8000/api/v1/movies/3 "Authorization: Token <YOUR_TOKEN>" title="AntMan and The Wasp" genre="Action" year=2018
+http DELETE http://127.0.0.1:8000/api/v1/movies/3 "Authorization: Token <YOUR_TOKEN>"
 ```
 Finally, I provide a DB to make these tests.