fix(login): show friendly message for upstream OAuth failures (#300)
Display a user-friendly error when redirected back with ?error=upstream
after a transient identity provider failure, instead of showing nothing.
authored by