Authentication plugin not respecting setting

[chan9948]

Even I disabled the "Allow User Registration" option and the "Default User Role" to Viewer, I can still register a new account with Admin role

Step to reproduce:

1. Disable "Allow User Registration" and "Default User Role" to Viewer in the Authentication System plugin setting page
2. Logout the current user
3. Click "Create one here" on login page and create a new account

expected: blocking from account creation
actual: new admin account created

[lane711]

Closing — this has been addressed by the RBAC enforcement work in PR #736 (shipped in v2.10.0), which was tracked under #616. Registration enforcement and viewer role restrictions are now properly enforced across all admin and API routes. Thanks for reporting @chan9948!