Auth flow error handling

This adds error handling around oauth flows.

Deep in the code there's something that parses it and adds the auth headers...