Check registration status

Before production, protect status lookup with OTP verification to prevent enumeration.