user.php updated

register, blocking on failed logins