This was the original intention of the replacement decorators, which would incorrectly give 403s to users who aren't logged in. This is especially confusing when @login_required doesn't send you to the login page.
