add login_required to some views