first step  REGISTER auth