Implement custom messages in decorators.

Accepting tips on how to cover line 838, it seems @fresh_login_required is never properly called in the tests.