New users default to first_login