Make account creation require admin credentials

[rgbkrk]

This can be a proper admin or a user that is allowed to create users.

[smashwilson]

Along with this, I'd like to add an account request method and a "pending" queue that admins could use. That would let operators control capacity without introducing bureaucracy.