Omniauth: Return 400 on invalid auth_hash