- fixed a residual bug in create_user