ADD: string constant
ADD: todo
ADD: reply bad request if register fails
ADD: Reset password
ADD: change password