Fix invalid token tests.
More error case tests.
Mock server should parse body and reflect to confirm it is valid.
Avoid request's `json` option.

request has very loose json parsing that just returns a string (not an
error) if parsing fails.