I hate myself for doing this, but @require_POST decorator doesn't allow for elegant error handling
Show 403 error page if user not authenticated or has insufficient permissions.