Make security interceptor throw on wrong token