it's only used the very first time to create the user, that's it