Send bad token response with correct error code