Use User.remoteMethod instead of loopbacks method

This is needed for loopback-connector-remote authorization.
Addresses https://github.com/strongloop/loopback/issues/622.