Make auth failure an IO exception to avoid incompatibility