let clients know if user exist but token is expired