Remove use of request info to identify user in AuthComponent::login().

In your controller you now have to directly call identify() to verify user credentials
passed in request against db record. login() now just takes a user array as param
and writes the data to sesssion.