Cleaned up route authorisation and triggered an event on oauth failure