If we get an unknown (but authenticated) user, create a blank account for them until the user feed can find them.
If using webauth and authentication provider doesn't... provide it... display an error page, instead of going into a redirect loop.