auth: fallback path in case the API is down

We still want to finish the auth process in that case, so the app
can display some error message.