Require login/permissions on all views

Since we're focusing on making it easy to deploy a RapidSMS project, we should require login on all views so that we don't deploy a lot of open RapidSMS websites with privacy issues. We could add *view* permissions as a start and lock down views that way.