Expose tokenserver's allow_new_users setting at top-level server config.