Reuse @require_POST decorator from django.
Add @strong_auth_required decorator.

And support re-login with @strong_auth_required.