502, bad token & autologouts 502, bad token & aut