Allow signups to go through, but don't automatically mark new accounts as active. Instead, admins should flag accounts as active based on a knowledge of who the person behing the signup is. That way we don't need to clamp down on signups as hard, and we can filter API resonses to only data associated with active user accounts.
[x] allow signups, but leave new accounts "inactive"
[ ] update the API routes for user and profile data to exclude inactive acccounts
[ ] possibly update the API route for posts so that posts by deactivated users no longer show up?
Allow signups to go through, but don't automatically mark new accounts as active. Instead, admins should flag accounts as active based on a knowledge of who the person behing the signup is. That way we don't need to clamp down on signups as hard, and we can filter API resonses to only data associated with active user accounts.