Move class allowed_methods and decorator sign_in_required into common utils (they are both used by the exposure and svir apps)