don't require auth for user creation
updated login