Remove duplicate validation finding User by login

Cleans up User.find_by_username_or_email by removing validaiton
Username and email uniqueness is already enforced at db level.
Usernames are uniq against emails as UsernameValidator prevents '@'