Auth provider returns 404 given an expired token