adding in a decorator to return null on api calls when user not authenticated