Use CAS to safely update AllChannels in auth.GetUser

Also added unit tests for GetUser / SaveUser.