When an invalid access_token is passed, this is the response:
error: "TypeError: DecipherFinal fail"
It should be:
error: "Invalid access token"
I've seen Bad digest, but not this one. Have you got an example to work with?
return a real error on invalid access token. fix #526