This refactor changes the NewUser function so it returns response data
rather than parts of the ultimate response. It ends up handling kind
of like a request handler. This refactor will be particularly useful
when adding additional credential types (beyond passwords).