It's only a warning because it means a bug in the client software or someone is making up tokens and trying them. It'll show in the logs but just not as an error.