A federal judge has ruled that Kik’s 2017, $100 million token sale violated U.S. securities law, and wants to see a proposal for refunds.