set login_required for all budget urls, added minimal login template