only allow register user to insert in db