- moved account creation to client side
- this should also work with allow and deny rules

- if signups are disabled, redirect user to sign instead.