[auth] OAuth protected-resource-metadata: fallback on 4xx not just 404

[auth] OAuth protected-resource-metadata: fallback on 4xx not just 404 #1557