Fix bug in user save api when there is no 'user' parameter in the request