Sso errors

When username was not passed, it was a 500. When password was not passed it was a 403. I've made them both 400s.