added staff_member_required decorator to public function

Add decorators to public functions to keep bots and other nasties out.

I know ckeditor is used for things other than just admin, and this is not really a viable solution, but this is a security hole that needs to be taken more seriously.