Fix receipt downloading by properly loading the permissions for the user/org

endpoints/web.py

@@ -10,6 +10,7 @@ from urlparse import urlparse
 from data import model
 from data.model.oauth import DatabaseAuthorizationProvider
 from app import app
+from auth.auth import require_session_login
 from auth.permissions import AdministerOrganizationPermission
 from util.invoice import renderInvoiceToPdf
 from util.seo import render_snapshot
@@ -152,6 +153,7 @@ def privacy():
 
 
 @web.route('/receipt', methods=['GET'])
+@require_session_login
 def receipt():
   if not current_user.is_authenticated():
     abort(401)