updated client side authorization for auto-reg