expose volumes for maintenance (so that they can be mounted from outside the container)
simple username blacklist to avoid name clashes
added overlay that is shown after login for five seconds to give the user container time to start up
use 'getting started' as default tutorial