Authorization: Not Found when token is for different email

[lautarodragan]

The authorization middleware sets the status to 404 if doesn't find the user associated with the token.

frost-api/src/middlewares/authorization.ts

Lines 28 to 32 in 58135e7

	const usersController = new AccountsController(ctx.logger, verifiedAccount, pwnedCheckerRoot)
	ctx.state.tokenData = tokenData
	ctx.state.user = await usersController.get(email)
	ctx.state.jwtSecret = jwt
	return ctx.state.user ? next() : (ctx.status = 404)

This can happen when the user changes their email address — tokens created before the change will remain associated to the previous address.

In this case, a simple Not Found error message provides little to no guidance.

Replace with Invalid Token, which is more correct, and logger.warning details of the event.

[lautarodragan]

Will be mitigated by #916