Apply login decorator before permissions check; less 403s, more 302s
Merge pull request #532 from kennknowles/case-51661-login-redirect

Apply login decorator before permissions check; less 403s, more 302s