deny account requests from already-denied addresses+issues

This also means we'll need a place to send people to when they're denied. "account+*denied" giving a relative or absolute URL, like *signup+*thanks ?