handle first admin user properly