Cleanup duplication in SesssionsController

Rake spec was green. My first pull request, so I would love any feedback you have!

I didn't see an easy way to get rid of all of the early returns, but I think the #create method reads better, and I got rid of some duplication with by introducing the #find_user_by_login.