handle oauth login user rejection

fixes #23