Could do, this is just the method that comes from Redmine's User model.  Also all uses of find_by_login in the code were unscoped already.