user creation test triggers an edge case and an exception

This could easily happen to a real user; the referrer header is
entirely optional.
test to ensure that duplicate users cannot be created