Better error handling for passive auth