all: improve error messages regarding token validation

[aeneasr]

Right now, most error messages returned by fosite result in a 500 error. This makes it hard to debug stuff and should be 401, 403 and similar. Probably upstream (fosite)

[aeneasr]

resolved by various fosite improvements