Manage users on both private and public server from the public server user admin page

[clmckinley]

We want to keep admin accounts (participant id >10000) in sync between the public and private server so if an account is created/changed on the public server it will also be created on the private server. There needs to be a flag on the public server to indicate that the account should be active on the private server.

• update the export/import to move admin/reader accounts from the public server to the private server.
• add an "Access to private" and "Access to public" flags on the account. On login check the appropriate access flag before logging in
• if the account is not marked as being active on the private server then we should always make the active flag false on the private server account
• during the import we should delete any accounts that have duplicate email addresses (keep the account from the public)
• remove the ability to manage accounts on the private server

? right now the api is public so we don't want to add the email/password has to that export without structural changes
? Will the password hash work if we copy it from public to private.
? We likely need to update the export/import to move additional fields on participant
? does the export/import move accounts over 10000
? when you admin add an account does it use the admin participant id? >10000
? there is no way to have different roles (admin/reader) on the two servers? (create two fields for public server role and private server role, maybe this replaces the access to flags)