OAuthResolverError was falling through to the generic 500 handler, giving users no useful feedback when they mistyped their handle. Now returns 400 with specific guidance about DNS records or handle spelling.