Admin creates initial account, users create own passwords
Updates css/JS
User activation controlled by separate controller