title: is_authenticated returns True for logged out user
body: <p>I'm writing a server app using Django, Django REST framework, Django-rest-auth and Django-allauth. I have a method that's used to pass messages between users, and this should only happen when the receiver is logged in.</p>
  
  <p>However, it seems that the user object's <code>is_authenticated()</code> method returns True even though the user has logged out (called <code>rest-auth/logout/</code>, which should in turn call Django's logout). What could cause this? Is there something I've missed here?</p>
  
  <p>Here's the code I have:</p>
  
  <pre><code>class SendMessage(generics.CreateAPIView):
      permission_classes = (permissions.IsAuthenticated,)
      serializer_class = MessageSerializer
  
      def perform_create(self, serializer):
          m = self.request.data['msg']
          targetUser = User.objects.get(pk = self.request.data['user'])
  
          if targetUser.is_authenticated():
              # Send message
          else:
              # Don't send message
  </code></pre>