add test for RegistrationService security