Add login_required decorator to restrict access