Force the generated admin user to change the password on the first login

When running `db:seed` we create an admin user with username `admin` and password `admin`. It is dangerous to have such default credentials (because users tend to forget to change the defaults).

This PR aims to make the admin change his password after his/her first login.