Expired or Revoked token should return a 404.