use tokenerror for client auth