invalid token doesn't actually need to throw an error.  it can be handled like other invalid token situation.  fixes dioscouri/f3-shop#139
Merge branch 'master' of github.com:dioscouri/f3-users