* Added examples to CSRF docs (courtesy sinisaos). * Improved ``SessionAuthBackend`` - it was too aggressive at rejecting requests when ``allow_unauthenticated=True`` (thanks to Bakz for reporting this).
If you send a GET request to the ``session_logout`` endpoint, it will now render a simple logout form. This makes it work much nicer out of the box. Thanks to sinisaos for adding this.
When using the ``nested` argument in ``create_pydantic_model``, more of the other arguments are passed to the nested models. For example, if ``include_default_columns`` is ``True``, both the parent and child models will include their default columns.