Fixes: Added assertion and audience to request for create handler, added an error message if an empty user object is returned.