Removing checks for `password` and `extra` in `postUser` since `attr*` fields are passed in. #1471