Move user creation to public route.