diff --git a/smash/web/views.py b/smash/web/views.py
index b27071d992f26219088f4cada553eee2dfcda201..ba5eeae2301ec2f1224f824ae58c1f4189d4ab9e 100644
--- a/smash/web/views.py
+++ b/smash/web/views.py
@@ -672,6 +672,8 @@ def appointment_edit_datetime(request, id):
 		form = AppointmentEditForm(instance=the_appointment)
 	return wrap_response(request, 'appointments/edit.html', {'form': form})
 
+#because we don't  wrap_response we must force login required
+@login_required
 def export_to_csv2(request, type="subjects"):
     #Create the HttpResponse object with the appropriate CSV header.
 	response = HttpResponse(content_type='text/csv')