enforce accessToken requirement

[pandapaul]

This has to be handled delicately, since the requests coming in from currently deployed versions of Bailey's Dailies do not include the accessToken. If we deploy this change before getting the client-side request fixed up, endpoints requiring this auth will return 400 error responses and quest progress won't be properly synced.

Here's the issue for the mod part of it: ToroCraft/Dailies#25