add /users endpoint for account creation
exempt the right path from auth filter when registering user