Staff can now force a new user into a datahub (eg: for corporate users)

Includes new unit tests for `User.add`, and new integration tests for `/api/user` and `/create-profile`