Describe the unhappy flow scenario of OTP authorization (phone or email in one field). What errors are possible, and how to describe them?