block client side creation of accounts, add to server, but hide from git because contains login creds