Send back invalid token response instead of a useless Apigee response

This should replace the `[B` error at least for tokens
don't need quotes around `error`, and I think this may look nicer inline with the `throw` call.