check for a 401 instead of a 403 and no need to check for invalid_api_token then
check for a 401 instead of a 403 and no need to check for invalid_api_token then

rokka-io/rokka.js,rokka-io/rokka.js,rokka-io/rokka.js