Merge pull request #3 from dimagi/update-decorator

modify require_privilege to also check the users privileges