res.user: cleanup defaults, use 1 sql query per login (from 3)