User registration only when calling /api/user