It's funny - you advocate to not build custom solutions to avoid not using Django provided APIs but then immediately build your own login_required decorator when Django provides one out of the box.