Return 422 if user is not found or password is incorrect

## Return 422 if user is not found or password is incorrect

### Acceptance Criteria
1. OAuthController returns 422 if the username (email) is incorrect or the password is wrong.

### Tasks
- Change response status codes.
- Clean up the code.
- Add unit tests.

### Additional Notes
- None
In what manner would `$captured` be used for mocking a return value?