generate password-token-invalid condition