auth decision error messages