anybody can register as a user on the web app

[dfirebaugh]

There should be a way to add a default root user and password (maybe from environment variable)

Then we should disable the registration and provide some way for the root user to create users.

... or a better method might be to allow the users to register (as a disabled account) but have another admin have to enable their account

[Athulus]

I like being able to register a disabled account that can then be enabled. I would like to make it easy for other people to help managing member keys.