I think we can safely assume all DELETE operations require a token.

This will ensure all DELETE operations are covered (deleting a repo was missed)
and reduce the amount of work needed by _token_required for every operation.

* Fix the test for deleting a repo as it now requires a token.
Make _token_required a little more efficient.

_token_required is called by everything.  Though it probably won't
make a practical difference.
.*? is redundant with .*
Merge branch 'refactor/token_required'

A few things that were bugging me about _token_required().  Planned to do more,
but profiling says it's not worth it.