Initial admin setup

Works only while no admin exists. In production, the setup token must match the server environment.