Return early if server sig does not match so we dont get a token set and...

... allow further API calls