users can register and login required for some operations