fix oauth error handling to handle 400s, and fix a few Assert error strings