fix typo in registration form
don't act on HEAD requests for token confirmation