added auth to more views in views.py