Don't perform Devise trackable updates on blocked User records

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/27519 an issue that no longer exists due to the outage. 😆

This will reduce load on the database when a blocked user tries to login, say, 47,000 times.