Tag changes when OAuth is used

This turns out to be very simple: we just hook RecentChange_save, and if
there's an OAuth access token we tag every change saved.

Change-Id: I0fcd3a811367c095fc630ddd0878fcce81a3138b
Merge "Tag changes when OAuth is used"