fix bug in user/create