added password encoder, register new user with request body instead of url parameters