Prevent client-side signup but allow auth.admin signup - Supabase