auth/oauth: only add user if user registration is enabled