Make sure default admin user gets an api token

Closed #7