Security issue

[smistad]

There are several important views which are missing the @teacher_required decorator:
Like this one (delete_annotation): https://github.com/AICAN-Research/learn-pathology/blob/master/slide/views.py#L515
This means that anyone, even students, can in theory delete an annotation.
Someone should go over all views, and check if they are missing the teacher_required decorator.