Auto-create admin users, fix permission lookups