Requiring a login to create a login would be a real chicken and egg situation. We can remove this TODO