This change also removes the legacy code that had security problems, i.e. accepting GET and requests without the XSRF header. If a registration is reported as invalid ( i.e. application uninstalled ) - we clean up our database.