I am confused, why is checkUserSession creating a new account if the requested one doesn't exist?