Change find_for_gds_oauth to find by UID then fallback to email

Allows users in preview where UIDs differ to login as the correct user. First checks if a user exists by UID then falls back to email.

[Edit: changed the original PR]