First-run setup

This creates the initial Administrator account. It requires the one-time setup token printed in the server console on the host machine (also stored on the host at DATA_DIR/setup-token.txt). There is no public registration; once setup is complete it is permanently disabled, and an administrator creates any further accounts.