Add whitelist check to account creation