invalid token redirect

when access token is invalid, the iframe redirects to the parent window