Handle auth failure

Adds a view and controller action for /auth/failure. This will
most likely be overridden in applications to match their style
and layout.