After $returningId() insert, if the re-select returns null the handler returned 503 without deleting the just-inserted user row, leaving an unclaimed admin row with no credential. Delete before returning 503 to mirror the cleanup already present in the catch block. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>