Add login requirement to js controllers, fix DeckRepo indentation