Optimise 'queryAuthStatus' by using two 'where' clauses instead of iterating over all docs

[ikusteu]

Fixes #933

[silviot]

Also the check on auth before the line

        const { email, phone_number: phone } = auth!.token!;

that prevents this sentry entry is not yet in the PR.