Add additional simple access token account creation authz

[dlongley]

We have support for turnstile authz tokens for account creation, but we should also add a simple config-based system whereby if authz token in the config (or an HMAC, etc. of it) must be provided in order for account creation to be authorized. This would be a helpful feature for simple systems with few users or for demo systems where account creation should be locked down.