Secure administration
Create the administrator
Use the one-time setup token configured on the server. Setup closes permanently after the first administrator is created.
The setup token is accepted only while no administrator exists. It is never stored in the browser.