3 calls to user_login_finalize()

install_configure_form_submit in includes/install.core.inc
Form submission handler for install_configure_form().
user_login_submit in modules/user/user.module
Submit handler for the login form. Load $user object and perform standard login tasks. The user is then redirected to the My Account page. Setting the destination in the query string overrides the redirect.
user_pass_reset in modules/user/user.pages.inc
Menu callback; process one time login link and redirects to the user page on success.

Buggy or inaccurate documentation? Please file an issue. Need support? Need help programming? Connect with the Drupal community.