Verify user logged in with 'protected' decorator

@gtrogers
@pbadenski