Secure first-run setup

Create the owner/admin login. No default password is used in this recovery build.