Revert "move token auth as first method in order to respond with 401 (vs 403) to unauthenticated requests that are denied permission"
Revert "move token auth as first method in order to respond with 401 (vs 403) to unauthenticated requests that are denied permission"

This reverts commit d7304801e387e7f93f76dcf7e10e336284301e41.

vsemionov/boomerang,vsemionov/boomerang,vsemionov/boomerang