It's a "dummy" user that gets set as the current account before authentication has occurred.  To the end user, it should basically translate to no account, which is why I just send back `nil` here.