Proper handling of incorrect auth tokens