Fixes for 'ralph_permission' decorator...

...related to API endpoints not handled by Tastypie.

And also, `@ralph_permission` wasn't necessary on some of the function-based views.