Make sure default admin user gets an api token

Closes #7