Server side validation errors should be usable by API consumers / Platform UI.

• the field the error applies to should be identifiable
• all errors should be reported, not just one [1]

1. applies to user creation. The login check will exit before content validation is even tried