Re: Emptying oauth_validator_libraries doesn't stop OAuth logins

[shihao zhong]

Hi Zsolt,

Thanks for v3.

I would keep the generic message. It is the same string auth_failed()
uses for a bad token. So the client cannot tell a removed validator
from a normal failure, which I think is also what Daniel wanted from
COMMERROR.

Thanks,
Shihao