disable routes for creating users