* add error template to access so that we can see the sidebar even if you don't have permissions * identity template cleanup * make the token expiry warning friendlier and style it