SSO Don't recreate a user account if they have one

If match by email is off, and they have an account already, don’t make
them a new one.

Props @fjarrett for reporting the bug.
Fixes a bug introduced in e91dd2d3f5db31f9a9ae6a1b0809632012775ecc