fixed a bug: users created by registation have no pre-privileges