Change create user success code from 200 to 201. Add 500 handler to indicate either the user already exists or an unexpected error.

AEM /libs/granite/security/post/authorizable endpoint unfortunately responds with http code 500 when the user already exists. However, 500 could also mean any other error.
It would be better if AEM responds with 409-conflict or 302-found instead. One can only wish.