Only respecting 401 and 403 responses on non token calls when the sent token matches the stored token on callback.