Handle invalid login tokens correctly