Don't raise a 500 response if user denies github auth request (#619)

This brings it more in line with what the other elsewheres do