Switched to login by id to allow proper work of verifyCredentials in models

If the model has an own method to check for the user/password (as sample a delegated LDAP authentication...) the return value of verifyCredentials is the only correct way to get the proper user, the old code make the search for user/password twice and in that way the model delegation don't work.

Fixed by a quicker loadByID :)

More comments on futher commits