The `require_admin` wrapper outside this might throw an authentication error (403?). Would it make sense to change the order of the decorators, so those errors could be converted into JSON automatically?