Add authorization check.

accountant/views/users.py

@@ -64,6 +64,9 @@ class LoginResource(Resource):
     def post(self):
         """Login to retrieve authentication token."""
 
+        if not request.authorization:
+            ns.abort(401, "Missing authorization.")
+
         email = request.authorization['username']
         password = request.authorization['password']