s3:auth Add error paths for invalid password_state values