this is the meaningful change - when this decorator is used it redirects to login instead of 404ing