throw different exception if token is missing vs token is invalid

[diosmosis]

Description:

When debugging the occurrence of token auth issues in API requests for users, it can be helpful to know if the token auth is just missing for the request (say some wordpress security plugin removes it for some reason) or if it's actually invalid.

Also includes a new .editorconfig to change tab type for the Wordpress matomo plugin code which uses spaces.

Refs #820

Review

• Functional review done
• Potential edge cases thought about (behavior of the code with strange input, with strange internal state or possible interactions with other Matomo subsystems)
• Usability review done (is anything maybe unclear or think about anything that would cause people to reach out to support)
• Security review done
• Wording review done
• Code review done
• Tests were added if useful/possible
• Reviewed for breaking changes
• Developer changelog updated if needed
• Documentation added if needed
• Existing documentation updated if needed

[tsteur]

That will be useful 👍