handle bad token