Settings: fix views being accessible without login

• login_required must be put below blueprint.route, otherwise the view can be accessed without authentication
• add tests for checking the login requirement for views
• add changelog and release version 0.1.1

Closes #48 (closed)