Properly prevents against creating a user if only deviceGuid specified