add login required decorator

Lock down the taskbuilder urls