better error message when auth failure with HEROKU_API_KEY