Add protected refresh endpoint

Author: hugopeixoto

main.rb

@@ -6,8 +6,6 @@
 require './database.rb'
 require './models.rb'
 
-User.all.each(&:refresh!)
-
 get '/' do
   challenges = Challenge.all
   users = User.all.sort_by { |u| -u.score(challenges) }
@@ -40,3 +38,11 @@
     end,
   }.to_json
 end
+
+post '/refresh' do
+  halt 403 if request.env["HTTP_AUTHORIZATION"] != ENV["TOKEN"]
+
+  User.all.each(&:refresh!)
+
+  "ok".to_json
+end