Fix authentication when the user has unvisited open flows

User's organization might have open flows the user is not part of, but they are still returned by the api and can be joined. Previously, if such flow was the first one returned, the authentication failed in process_current_user as the user was not found from that flow.