Add a TODO around session management at user creation