reset back to regular password hashing
check status from cancel registration
provide username changed APIs on notification services
enhance account verification key