Wrong callback code should throw 4xx error rather than 500

[drewbo]

These endpoints should throw a non-500 error

• https://pages.cloud.gov/admin/auth/uaa/callback?code=nonsensecode
• https://pages.cloud.gov/auth/uaa/callback?code=nonsensecode

Acceptance Criteria

• [ ] Wrong callback code throws 4xx error rather than 500