add login_required decorator to necessary views