formalize

sign in with a token, then register a passkey. 2d3e175