/account/destroy can throw an "incorrect password" error

This status code was missing because destroy [does throw the "incorrect password" error](https://github.com/mozilla/fxa-auth-server/blob/b989946c78526b46831a3653866dc917ad16d60e/routes/account.js#L582).