Change /authorized to return 404 for expired tokens
Updated device token refresh method to match latest spec