API: store users. Simplify validation and log the user in if called from outside the API
Use the API in UsersController