Protect/authenticate account creation API endpoint

* [x] Implement a config setting to disable account creation/registration (at the UI and the API level).
* [ ] Add an `ACCOUNT_CREATION_API_KEY` config setting (an api token to give to other external apps to enable them to use LifeServer as a user account management backend). 