added admin role + creation of first admin user at startup