proper way to create initial admin user
restricted /admin access
translations
profile enabled for everybody who has at least one role
adding roles to users