Keep ops on user, oauth db entries in sync

Still unsure of how we end up in situations where user is set and oauth is not. Stricter template check should prevent errors here however.

Refs #737.