`@storage.access_token` is harmless.  Storing invalid data here has the same effect as providing, say, an invalid password at login.