Use flask-login unauthorized callback

In auth_token_required and auth_required decorators better use unauthorized() callback from core flask-login. This solution is more flexible.

http://pythonhosted.org/Flask-Login/#configuring-login