I have turned off new user registrations. Our old code cannot be secured without an upgrade and the bots are getting smarter. In fact, some of the bots are people. I'm sure you've heard them. RSF is swamped with fake accounts. The easiest workaround is to use the old 'Send an email request to
[email protected]'. Admin attention is required anyway to activate the account.