Moved password verification to user model
Added TODO for the future me
Moved out some of login logic closer to db
Removed warning that will not be fixed in near future