Use built-in @permission_required decorator

In #761 we added ability to easily decorate CBVs and removed most decorator-replacement mixins. This PR removes the last one.

We could write a custom decorator to check that the user has multiple permissions. But since none of our views currently require more than one permission, I thought to just use the built-in @permission_required decorator.