made ForEachUser use a read-only cursor, too. there is now only one piece of

made ForEachUser use a read-only cursor, too. there is now only one piece of
code in Citadel proper (not the database driver) that needs transactions.
that's check_ref_counts; in other words it's the only thing standing in the way
of a clean implementation of retryable transactions.