Using Arel to find user by credentials

Because that condition is too small for one more method and because we don't need to reuse it.