Fix missing created_by and missing authentication on views

• Set created_by properly after form validation
• Fix login redirect
• Add login requirements to class based views
• Added a mixin that can be used on views to check whether a user can access a workspecification

For unit testing:

• the created_by logic is extracted into a testable function
• the can_be_accessed_by logic is added to the Workspecification model