registration workaround so random users cannot sign up, but password editing is still enabled