Hm, I don't have enough understanding of OAuth2 to have an educated opinion.

All I can advise is: beware, if you'd rather rescue the errors that may happen in the controller's actions (like, when calling `Prismic::SearchForm::submit`), I don't think it will be enough, as when the issue happens, it pinpoints to this very method, `ApplicationController::api`, which is called before` submit`.

Sorry I can't help out more!