Add @login_required decorator to icebox views

We need to make sure that icebox stuff is under authentication even if we remove sitewide lockdown.