diff --git a/console/deploy/console.yaml b/console/deploy/console.yaml
index 004d761..19c7872 100644
--- a/console/deploy/console.yaml
+++ b/console/deploy/console.yaml
@@ -46,7 +46,7 @@ spec:
       serviceAccountName: fission-console
       containers:
         - name: console
-          image: naeel/fission-console:v0.8.14
+          image: naeel/fission-console:v0.8.15
           ports:
             - containerPort: 8090
           env:
diff --git a/console/main.go b/console/main.go
index 9752723..4c85be1 100644
--- a/console/main.go
+++ b/console/main.go
@@ -1867,6 +1867,10 @@ func (s *server) handleAuth(w http.ResponseWriter, r *http.Request) {
 	var ns string
 	if s.testMode {
 		// testMode: токен — это sub (email), Deck не вызывается
+		if !strings.Contains(body.Token, "@") {
+			writeJSONError(w, http.StatusUnauthorized, "invalid token")
+			return
+		}
 		ns = func() string {
 			h32 := sha256.Sum256([]byte(body.Token))
 			return "fission-" + hex.EncodeToString(h32[:8])