Disallow registration in install mode and adds redirects

bookwyrm/views/setup.py

@@ -1,9 +1,9 @@
 """ Installation wizard 🧙 """
+from django.core.exceptions import PermissionDenied
 from django.template.response import TemplateResponse
-from django.utils.decorators import method_decorator
 from django.views import View
 
-from bookwyrm import emailing, forms, models
+from bookwyrm import forms, models
 
 
 # pylint: disable= no-self-use
@@ -12,6 +12,11 @@ class CreateAdmin(View):
 
     def get(self, request):
         """Create admin user"""
+        # only allow this view when an instance is being installed
+        site = models.SiteSettings.objects.get()
+        if not site.install_mode:
+            raise PermissionDenied()
+
         data = {
             "register_form": forms.RegisterForm()
         }