Set up the first administrator

This one-time setup is available only while the users table is empty. Remove APP_ADMIN_SETUP_TOKEN from the server configuration after setup.

First-admin setup is closed. Configure APP_ADMIN_SETUP_TOKEN if no users exist, or sign in.