better error message when using an invalid access token