fixes #5178 - unify API parameters and return values. User creation should not require payload wrapped with 'user' root

right, in any case, the API renames them to `override_values`