WIP: User registration part fixed req.body.user.id instead of req.body.user.username since it comes from client, not the form.