User-facing error message on auth failure