Docs should make clear that setting oidc_providers.allow_existing_users: true has security implications

Docs should make clear that setting oidc_providers.allow_existing_users: true has security implications #319