create default admin user on first run
add missing flask-security templates