register method is allowed by non logged in