Option A: return auth URL in as a Postgres error until done Option B: delay query responses and show the auth request on the Warpgate homepage