Comment 6 for bug 293164

I've duplicated this. The token is in the database and verified, but it doesn't validate anything.

A similar problem happened in the past (token created but doesn't work) because the user wasn't in the launchpad-beta-testers group. I think that's the most likely cause of this problem. Is there an access control group for web service access on staging?