negative testing?  What happens when we pass in an external_id that is for a non-existant user? i.e. what happens when this call errors out?