Changed: replying 401 if error while attempting to handle authentication
The problem with 500 is that it does not reset stored credentials in a browser
Fixed: first time authenticated user created via UI

Changed: finally manual user data validation

Added: minimum required validation

Added: basic UI to create new user (not submit yet)