We should inject this instead of creating it on the spot. I also think we should go ahead and convert Elgg_EntityDirLocator to a service so it can be used to look up multiple users and, more importantly, so it can be injected without knowing what user we'll need to look up.

@brettp was there a strong rationale for having this bound to one user?