More import/form tweaks
@login_required wasn't necessary because having a permission implies being logged in.