fix(auth): handle server error responses