Fixes security hole

The firstrun.aspx page would always allow you to create a new user with
access.  This fix will only allow users to be created when no user
exists.