Change find_for_gds_oauth to find by UID then fallback to email

So when on preview where the UIDs differ from production users can still
login as themselves not a duplicated user.