OAuth2AuthorisationServerConnector: Fix _checkCustomTokenPolicy call places

This method raises the same error as jwt's claim validator, as it was intended to be
called from the same exception handling block. So move it from "else" blocks into
the corresponding "try" block.