Test handling of auth request response 400