Return 422 if user is not found or password is incorrect

## Return 422 if user is not found or password is incorrect

### Acceptance Criteria
1. OAuthController returns 422 if the username (email) is incorrect or the password is wrong.

### Tasks
- Change response status codes.
- Clean up the code.
- Add unit tests.

### Additional Notes
- None
Yeah, I did make it up. I just meant an assertion about the identity (reference) of the object rather than the value.