OAuth and RefreshToken aren't deleted when user is deleted

[danny900714]

We should implement referential action when related field is updated and deleted.

See https://www.prisma.io/docs/concepts/components/prisma-schema/relations/referential-actions.