fix 500 error when auth_token is invalid