improve error handling
don't treat oauth denial as error