More /api/users POST validation and file system cleanup