all invalid generateToken calls throw Errors, fixes #62