The token has an invalid signature.
Confirm a valid and signed token is being passed.
To check whether signed correctly, you can use the tools available at jwt.io(link takes you to an external page).