User.create({ username: req.body.id, password: req.body.password }, (err, user) => {
      res.locals._id = user._id;
    });
    next();

//----OR----//

    User.create({ username: user, password: pass }, (err, user) => {
      res.locals._id = user._id;
      next()
    });