login decorator, routes for ajax calls in the moment