allow to use a protected signup form without approval