Improve UserController specifications :
catch validation exceptions and return BAD_REQUEST code
expose a constructor to inject final properties (userRepo)