Add a check_access.

It only checks if the request.user is properly logged in.