I suspect we want a login_required decorator on this view, no?