Initial identity collection in the database

Define the initial identity structure in the database, and tests.
should we be doing a d+ assert here? or do we really not care? I think the latter is maybe supportable but should at least be commented -- OTOH the former is also reasonable, in that if we managed to login at the last moment before the identity was dropped, we should probably take the opportunity to cancel the login.