Add login_required decorator before allowed decorator