handle internal auth errors