Wrap create, delete user and grant calls in 'flush privileges'

To ensure in-memory state is consistent with database