The default value for a user origin is now UAA.
This simplifies the code. A negative side effect is that LDAP and SAML users,
will have to reestablish approvals, and possibly group memberships.