Doesn't inform user if a previously generated token is invald

1. Configure with user password
2. Add On converts to app password
3. Revoke this app password in web interface
4. Go to configuration again and save

==> Token stays the same, but doesn't work.