Changes to firstrun: added step to change root password, added double password fields to prevent mistyping, added header to applications table
minor fixes to firstrun