location header added: after user creation: /user POST