Change error code throw with "invalid_credentials" or "invalid_refresh"