Do not raise error in AutocompleteController#users when not authorized

What does this MR do?

Fix 500 error in https://gitlab.com/gitlab-org/gitlab-ce/issues/25031

• Changelog entry added
• Documentation created/updated
• API support added
• Tests
  • Added for this feature/bug
  • All builds are passing
• Conform by the merge request performance guides
• Conform by the style guides
• Branch has no merge conflicts with master (if it does - rebase it please)
• Squashed related commits together

What are the relevant issue numbers?

Closes #25031 (closed)