don't error when the user just has the wrong auth token