Bug 917669 - invalid or expired authentication tokens and cookies should throw errors, not be silently ignored r/a=glob