Fixes #12 Use a decorator to check the session and the user's role