Remove unneded auth code.

With 71c678cd1eee0a76a both login and set_access_credentials
run clear_authentication. This means some of the code lines
in those two methods are now unneded. 

I removed `update_user`. I don't think there is a need for it anymore since `clear_authentication` is run before it sets `r.user = None`.