add more explicit auth errors