reverted to return InvalidGrant, but with a more descriptive error message