Fixes https://gitlab.com/gitlab-org/gitlab/-/issues/28978

Changelog: fixed

Add unit tests

Update note on find_user_from_web_access_token