Fix OAuth token login endpoint to set session user

@aleffert @nasthagiri @rlucioni 

@ormsbee If it's possible to get this into the release as well, that would be super. I'm sorry for being an idiot.