If they don't need to see the rest of the site with the general login, another option is to simply isolate the account creation section in a subdir (or authenticate based on filename) and have different authentication parameters for it.