split forms to their own file; minor changes in comments etc

Also add some @login_required decorators