Ensure alert list requires login

Was missing auth decorator beforehand.
Ensure predicate fields have ? at end of verbose name