Handle AuthManager introduction to core
This makes "accept" redirect to CreateAccount with a mostly-locked
form for creating the user and sending them their temporary password.
When that happens, the request queue is updated as normal.
Also fixed some rollback exceptions that happen on form rejection.