ensure private data is not exposed when users are registered; replaced Milonga generated routes with explicit handlers