Sometimes error 500 should be 403

[juniorgarcia]

Once I tried to access an endpoint with a wrong access token, but this returned a 500 error code instead of a 403 (forbidden).