Add feature test for POST / without token

[Syndesi]

Add a feature test, which verifies that a request to POST /, without token, and without the anonymous user's id being present in the database, should fail.

Related to #415 .