move newUserMustFillInRegistration logic to authentication module
and apply it only when a protected page is visited