fix bug 748: provide a proper error when user is not valid upon new token