Fix user enumeration vulnerability on registration endpoint

It seems like almost no app cares about user email enumeration on registration. But I hope that can change in the future with increasing cybersec awareness!