registration is functional but needs to auto-login the user