Password is now a required field. CSRF Token is now stored in session.
Refactoring after cloning.
Refactoring after cloning. New user create functionality implemented.
XSRF-TOKEN cookie is now being set for angularjs to pick up.
Refactoring after clone. Create user now works.