Remove unnecessary attribute setting in factory

This was originally used in the ActiveRecord implementation due to
`attr_accessible`. Since we're not using ActiveRecord, we can do set
user attributes in a much simpler way.
Handle invalid authentication
Handle signing out
Extract signing in to a method