api: always allow user registration for admin users