auth: add an AuthRequired decorator around handler functions so that each function doesnt need to reperform that work