Enforce blocks in API

Don't allow OAuth calls on behalf of users who are blocked

Change-Id: I9b944acf51797a140c3d15639c3421f835497de9
Merge "Enforce blocks in API"