Hi! Sorry about the late reply, I've been struck down with the flu for the past week and wasn't able to do anything.
To be honest, that was the first piece of code I removed when trying to fix it. The exception is not caught in the abstract listener, which caused the original problem of cleared tokens.
On second thought, it probably should be left in so that code can react to the different cases ("no certificate provided" and "no data in certificate"). Can you give me another couple of days to check it out? I'll put the code back in and make sure the abstract listener reacts correctly to the exception.