Refactor user creation actions

Create a separate #create action that handles POSTs to
/user/new. This simplifies the other actions and ensures that the URL is
/user/new when validation errors occur, rather than /user/terms.

Fixes #398