[keycloak-user] users created through rest api not enabled

[Matthew Broadhead]

using Keycloak 4.5.0 standalone.  CentOS 7

we have been using the REST api to create users by POSTing a 
UserRepresentation to /{realm}/users

it still works fine but the two properties setEnabled and 
setEmailVerified are being ignored
userRepresentation.setEnabled(true);
userRepresentation.setEmailVerified(true);

even running a subsequent PUT and setting the values has no effect.

we have not changed our configuration at all for a long time. perhaps a 
system update has caused this?