Registration: fix mass assignment vulnerability