Add login_required to various API calls