Add setting to disable developer requests
There are still some issues with developer requests; we should disable them until everything is working and tested. Also, once enabled, we need to disable requests on Identity, so that there is only one place to do it.
This commit adds an ENABLE_DEV_REQUESTS
setting to hide the related UI and
disable the developer-access-request
URLs.