do not send api tokens in requests
include api token with register request