Added check for sign_up_enabled

Even though the sign-up form is not displayed when sign ups are disabled, we still need to refuse processing.