Security: Fix auth.outh2 generating a user session

If you are logged out of Pony.fm, made a request to an endpoint using this middleware in the browser with an access token with the appropriate scope, then went back to Pony.fm, you'd be logged in as the owner of the access token.

app/Http/Middleware/AuthenticateOAuth.php

@@ -70,7 +70,7 @@ class AuthenticateOAuth
         $poniverseUser = $this->poniverse->getUser();
 
         $user = User::findOrCreate($poniverseUser['username'], $poniverseUser['display_name'], $poniverseUser['email']);
-        Auth::login($user);
+        Auth::onceUsingId($user);
 
         return $next($request);
     }