instead of casting, I'd rather prefer to throw a 400 if the `registration` parameter is not an array