use request.user instead of username user_id variable
redirect to he page they were viewing if login_required is used