User.pm: Handle params from JSON properly

Signed-off-by: Shea Levy <shea@shealevy.com>