Instead of returning a correct error response when a token is invalid/expired, a 500 is returned instead.