Attempt a better phrasing of the OAuth scopes key
Factor out logic for finding the default error message
Factor out OTP header parsing