temporary solution to unsecure register user api