log warn instead of error when user denied request

Log a warning instead of an error if the user denied the oauth request.