I don't think we should even hit this action if the user declines the request. Instead the button to decline should just link to the stream page.

Or yet better we tell the application that the user aborted the request. Two scenarios to accommodate:

* For a webapp we need to redirect to a failure given by that app or set a flag in the callback URL
* For a mobile/desktop app we would need to respond with an error and some json that it can intercept. Though I don't see any handling of mobile/desktop app semantics anywhere.