Because the order matters here (i.e., processing the `statusCode` *before* `error`), let's add one more line to the comment to indicate that this has to happen first.

Because of this, which I think is OK as a band-aid but troubling long term, I'd suggest we file a follow-up to fix what we actually return from the login server so errors can be processed first.