Read only create failed to work correctly due to the way DRF serializers
behave. Updates to work consistently, and adds test to cover this case.

chore(release): 0.17.0

See merge request !91

Resolve "Update API to accept list of codes"

Closes #40

See merge request !86

chore(release): 0.16.1

See merge request !90

fix: bug with fake token creation

See merge request !89

chore(release): 0.16.0

See merge request !88

feat: allow creation fake tokens in test/demo environments

See merge request !87

chore(release): 0.15.1

See merge request !84

Add openapi and clients to release assets

See merge request !83

chore(release): 0.15.0

See merge request !82

Handle order of events, add soft delete and add valid_at

See merge request !76

chore(release): 0.14.0

See merge request !81

feat: correct password app reset token call and handle missing users

See merge request !80

chore(release): 0.13.0

See merge request !79

Resolve "Add an endpoint that gets a new reset token for the authenticated user"

Closes #25

See merge request !77

chore(release): 0.12.0

See merge request !75

Allow data-manager API to be read only

See merge request !74

Adds a setting to set the data manager internal API to read-only
mode. This updates that API to be read-only by default. Environments
have to explicitly configure the data manager API to allow write.