Sonar findings and minor improvements in o.a.j.oak.security.user

The are a couple of sonar findings and minor fixes that help improve readability and reduce complexity of the user management implementation oak-core.

• missing nullability annotation
• redundant checks
• unreachable statements