rework user creation/handling