update for registering, auth_token (not used really) removed from user