User API

* [x] A Visitor should be able to `create` (register) a User account. User accounts need to be confirmed via email before they are active.