* create initial admin user with difficult password (based on UUID)
* force login with password as security token
* force initial admin user creation