update back-end:
* registration and login already work