fix: `register` allows self-referral

[sanmipaul]

register(env, referee, referrer) doesn't appear to check referee != referrer. An address could refer itself and farm record_activity rewards without bringing in any real new user.