no authorization required, register user, and encryp pass