Better failure modes on auth.