consider users without an associated identity record, closes #110