User creation data is now validated via the 'user.creating' event