This doesn't take into account any Session information that might modify the response (user login). Does that just mean that we won't use this decorator with anything that requires authentication?