renaming permission_not_required to login_required