maybe best to not 'swallow' this exception here and return none... i would consider just letting the InvalidTokenError propigating up the stack. there is a mapper in ```jumpgate.common.exceptions``` which will transform this exception into an Unauthorized, but more importanatly it will dump the error to log before doing so to ease admin operations of this service.