Thanks for the bug report.
This is now fixed in the source code repository so it will be fixed in the next release.
The main problem was it was missing the validationgroup on the button so it was not doing the client side validation, it did validate on postback but then it should not have shown the newsletter tab because it is not meant to be shown until after the user is created.
Best,
Joe