Make OAuthUser swallow errors

This can happen if the database goes into a readonly state (for example,
when doing an upgrade or machine migration). Read requests should still
function as expected so the OAuthUser methods must be resilient to this.