protected views using @login required decorator