don't create a user by hand, user_external_login_register() does that for us