throw illegalstate from Tokenizer (instead of NPE/IIOBE) if reset not called

We added these best effort checks, but it would be much better if we somehow gave a clear exception... this comes up often