Do not enforce bearer token spec for unprotected resources.

Attempting to make a request that doesn't require authentication was failing
if the request didn't match the bearer token spec.  This occurred even when
updating the filters.