#870 WebSecurity allow IDictionary for extra properties when creating a user