Fix: Fixed invalid order of applying authentication decorators.

Authentication and authorization decorators were applied in wrong order, which resulted in Forbidden HTTP error to always be thrown. Now it is correct, when the user is not authenticated, Unauthorized HTTP error is returned and user is redfirected to login page.