add country to new user only if it is in the whitelist

some users are never used to send by smtp, when they're compromised the first country used to send spam is added to its allowed countries list