[Proposal] Return message with Token Mismatch

this can help on javascript front ends to pass the reason on to the user.
Maybe it is a security risk?
I'm basically saying I'm :-1: on this, that's all. There's not much more for me to say.