properly handle rejection of auth with microsoft

fixes PLAT-310