Updated User creating to take the user id in the Authorization header
Updated tests to reflect this.