should this call really be made by a user or by an application for a given user?  (e.g. does Jimmy have the permission / ability to create his application user in Accounts, or is that something Exercises does on its own?)