Restricting the receipt API to authenticated users (bug 917601)

Otherwise a 500 will be raised given the usage of `request.amo_user`
Merge pull request #1159 from davidbgk/917601-receipt-api-500

Restricting the receipt API to authenticated users (bug 917601)