Use API error message whenever available

This requires some fiddling around with casting an Error, but is worth it to avoid those dastardly numeric error codes.

Showed up in the login error toast associated with #29 (closed).