Add debug logging when jwt token can't be verified

This was missed in the original debugging MR.