registration and authorization (wip)