User registration done in POST body not params