Removed CSRF validation on API calls
[CSR-137] Form class
[CSR-137] Validation for User Entity
[CSR-137] Removed wrapping response in 'data'
[CSR-137] Disabled event listeners
[CSR-137] Updated controller for create (POST)