Spec and refactor User.find_for_commit

Now it executes a single query instead of a possible three at the cost
of some scary-looking ARel calls.