www/apps/userservice#get_user: Fix fallout from the Storm migration. ivle.auth.authenticate.authenticate now wants a store, so we give it one. We also perform the old password check before we set attributes on the user, as otherwise the new password will always succeed (as the hash has already been updated).