Bug 1094998 — POST /rooms/:token action refresh without Authorization header should return a 401.
Merge pull request #260 from mozilla-services/1094998-post-action-refresh-401

Bug 1094998 — POST /rooms/:token action refresh without Authorization should 401.