[fix] fixed security issue with register