fix the user form.

 fixes #403, fixes #351.

the problem was that _post_clean is called regardless of validation errors or missing required fields.