auth.user: 重构 find_by_name