add a new user doesn't need authentication
check if nextRoute.access exists before calling requiredLogin