- use the same mixin for the api and the UI (so that the authorization
  code is not duplicated)
- renamed JobAuthorizationMixin as JobAuthMixin (because it is easier
  to type ;-)
- LoginRequiredMixin is no longer required because authentication
  (and redirection to the login page) is handled by UserPassesTestMixin