better error messages in case of auth failures
better return of what is in the token
WIP - setting certificate name