title: Creating a user using the SonarQube API returns a 401
body: <p>I'm trying to create a user using the SaonarQube API (version 6.2 or up).</p>
  
  <p>I have setup a SoapUI project that contains a few test scripts. One of them is login in and creating a user. this one returns a 401 whe the user creation call is done.</p>
  
  <p>The login is used for other calls as well and proves to work. Except for the create user call. The account used to login to SoarQube is member of the System Administror groups.</p>
  
  <p>Below is the raw request.</p>
  
  <pre><code>POST http://localhost:9000/api/users/create HTTP/1.1
  Accept-Encoding: gzip,deflate
  Content-Type: application/x-www-form-urlencoded
  Content-Length: 47
  Host: localhost:9000
  Connection: Keep-Alive
  User-Agent: Apache-HttpClient/4.1.1 (java 1.5)
  Cookie: JWT-SESSION=eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJBV0ExaGFtX2hnNWdHUWtNNVRHSiIsInN1YiI6ImFkbWluIiwiaWF0IjoxNTEyNzI2NDQwLCJleHAiOjE1MTI5ODU2NDAsImxhc3RSZWZyZXNoVGltZSI6MTUxMjcyNjQ0MDM4MywieHNyZlRva2VuIjoicHRwcXRlYmtzYTR2MTlhaTk3anV0bnVlZW8ifQ.waHqOsMJ9P6FyIOUWuVODl5QcW-IJp10G6oUAvy1DWk; XSRF-TOKEN=ptpqtebksa4v19ai97jutnueeo
  Cookie2: $Version=1
  
  login=user01&amp;name=name01&amp;password=%21P%40ssw0rd
  </code></pre>
  
  <p>Below is the raw resoonse</p>
  
  <pre><code>HTTP/1.1 401 Unauthorized
  Server: Apache-Coyote/1.1
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Content-Length: 0
  Date: Fri, 08 Dec 2017 09:47:20 GMT
  </code></pre>
  
  <p>Any suggestions are welcome.</p>
  
  <p>BTW: I can create the user using the same values using the UI so there is no issue with he user information, at least it seams so.</p>
  
  <p>Update 1:
  Added raw request with querystring parameters</p>
  
  <pre><code>POST http://localhost:9000/api/users/create?login=user01&amp;name=name01&amp;password=%21P%40ssw0rd HTTP/1.1
  Accept-Encoding: gzip,deflate
  Content-Type: application/x-www-form-urlencoded
  Content-Length: 0
  Host: localhost:9000
  Connection: Keep-Alive
  User-Agent: Apache-HttpClient/4.1.1 (java 1.5)
  Cookie: JWT-SESSION=eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJBV0JHZkVGY0h3bW5UZ0V5QklJNyIsInN1YiI6ImFkbWluIiwiaWF0IjoxNTEzMDExMDM2LCJleHAiOjE1MTMyNzAyMzYsImxhc3RSZWZyZXNoVGltZSI6MTUxMzAxMTAzNjQyNCwieHNyZlRva2VuIjoibmIzdmlpcjAyZmZ1ODJnMzNtdW1hYWdkN3QifQ.ur8eZkW1CwNinx4tInFsbkGLQTHQ6yFjheRfup8Z4fQ; XSRF-TOKEN=nb3viir02ffu82g33mumaagd7t
  Cookie2: $Version=1
  </code></pre>