Completed user REST APIs

Completed user REST APIs
We probably don't want to log the full `credentials` object as that might contain a password. Can you clarify that we couldn't create a user account because it already exists in the log message