Re: Pass token on listMethods to enable allowUnauthenticated=false (issue 6306074)

[sieverssj]

LGTM.  As a followup to this review I may look into how we can better
generate SecurityToken token objects that align with the injected codec.
 More to come on that later.

http://codereview.appspot.com/6306074/