- Treat missing access tokens as auth failures - Preserve AppAuth discovery errors for correct network/auth classification