idempotent user/db creation