Maybe we can use login_required decorator to check authorization of user.