turned off registration feature
authorization bug
xss bug