create all webapp databases so _security is set (fixes 3517)