Fix create-user when UAA is being directly used as auth server

If the authorization server doesn't return an UAA endpoint link, assume that
the auth server *is* the UAA, and use it for user management.

[Finishes #67477014]