Trigger a real Error when hinting at auth failure

As introduced in dc2112939968634c76b9877a6c8e0ba448c0c5cf, the object returned contains no stack information and cannot be used in  `throw`.

Switching it to a real `Error` instance is backwards compatible, but provides more information.