This looks like it will always create the same user. Maybe should use params?