improve clarity of error msg. no need for auth token value in exception string