Avoid exceptions when forged with credentials in an invalid format
Return the ID that was attempted to be asserted when credentials are invalid

Might be useful for reporting in cases of "someone tried to access your account".