Django without cookies - sessions and decorator