The OAuth 2 user registration problem