fixed, base64 encoded user creation