FEATURE: allow creating admin and moderator accounts via SSO