user_save() is not called if the user is blocked

`raven_auth()` gives other modules the opportunity to edit the user account, but `user_save()` is not actually called if the user is blocked. This changes it so `user_save()` is called before working out if the user can be logged in.