Change find_for_gds_oauth to find by UID then fallback to email

So when on preview where the UIDs differ from production users can still
login as themselves not a duplicated user.
Merge pull request #45 from alphagov/config-auth-key

Change find_for_gds_oauth to find by UID then fallback to email