Added optional client_id param to create_user so that app is granted merchant permission to user account.