User accounts should have a 'requires credit card' flag, defaults to true, can only be changed by admin. - fix #453