authorization and registration actions now use constants from package settings