Provide a useful error if token has too few/many ':' separators

[c1de0x]

E.g. if the user forgets to add a field, or if their password has ':' in it.

This error should be NOTICEd to the client, so they see it in the client.