user registration should 404 if you're not using one

prevents a 500 later