[API] friendly notification about invalid/expired token