security registration mistakes to avoid