requires_auth decorator
wip