FIX: Ignore invalid tokens instead of throwing 403