fix we-oauth2 crfs token
update on user register