CORS fixes
added user create api unit tests