new route_restrictions module that adds a decorator to views that require group membership