add better error message when auth failed