what happens if authorization fails?

cc: @robguthrie