Bump to Django REST Framework 3.13.1

This is the only DRF bump we can make easily. The only change is that positional arguments on serializer fields are now forbidden, which affected just one field in the whole codebase.