If issuer is already stored at User.forceIssuer, do we need to pass issuer here? Can the code be made easier to understand and more transparent by not passing it? Can we set User.forceIssuer and forget about it from there on out and just have all calls to user.js "do the right thing"?