Another good reason not to require a staff member as an argument to `add_user`.