if you put in an incorrectly signed token it breaks the whole site