user creation now responds with a standard 201 status code and a Location header.