make explicit exceptions
catch exceptions thrown by token store and turn them into auth provider exceptions