createUser (now an admin can create a user )