Allow for pre-registration of fully activated accounts via API without user interaction

[codinghorror (Jeff Atwood)]

I believe this was the source of a massive security hole we patched a while back, so it may not be enabled any more. Do you remember @sam?