[api] Make invalid token message more helpful.