Actually check requires_valid_token in API calls
    
    This change will make sure that if a token is not provided in a call
    that requires API tokens, we return a sane error message.
    
    Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
    Reviewed-by: Howard Johnson <merlin@merlinthp.org>