FIX: move hp request from /users to /token (PR #10793)

hp is a valid username and we should not prevent users from registering it.

GitHub