Allow creation of lists, and enforce user-level invariants
CreateResourcesRequest now lets the owner be optional, allowing for creation of owner-less resources like mailing lists. Both CreateResources and CreateUser now check that user-level invariants (criteria such as "1 email per user") are respected.