Authentication flow controls

Authentication flows should have improve overall handling—including clearer error states and an explicit Cancel action so users can abort provider auth without leaving the flow in an inconsistent state.