Having userWithGuid in Dao would probably be no worse than in ExportBaselineStats.  Then again, the controller is not a pristinely organized piece of software as is, so I don't feel strongly about this.