Inject user instance in controller constructor and remove static vars/methods.
Fill user instance and then call isValid method without data param.
Chain fill and isValid methods; save user instead of create.