The claim key has changed, the code needs to be updated to accommodate that. See Constant.java. Also see ObjectAction.verifyAccess(). generatorID will need to be set successfully for existing non-expired keys as well as new keys, unless we expire all tokens manually.