hiddenCode move to login and register only