diff --git a/main.go b/main.go
index d06452d..dca92d2 100644
--- a/main.go
+++ b/main.go
@@ -119,6 +119,8 @@ func mpDomainAuthSecret(w http.ResponseWriter, r *http.Request) {
 //redirect user to a URL "/pages/dashboard"
 //
 func initialRegistrationHandler(w http.ResponseWriter, r *http.Request) {
+	//TODO: verify url parameters and make sure its username is correctly set
+	//
 	expiration := time.Now().Add(10 * 365 * 24 * time.Hour)
 	str := time.Now().String()
 	cookie := http.Cookie{Name: "username", Value: str, Expires: expiration}