Prevent user creation

This MR adds the HELMHOLTZ_CREATE_USERS option to prevent a website from creating users via the Helmholtz AAI

closes #5 (closed)

ping @housam.dibeh @seyed.takyar