Do not force a Content-Type when handling unauthorized errors
Make the InvalidTokenResponse object available to views