What happens when req.body.username/password/email are empty here? A register was successful for an empty body