1. support reset registration
2. support user invalidation
3. looser API