Set initial admin password

[JuergeN]

As an administrator I want to set an initial admin password before starting DeepaMehta on a publicly accessable server for the first time. The fact that DeepaMehta is 'open' for a certain amount of time before one can login and change it, does not make it a secure system. A new entry in the config file could do the job.

[jri]

Replying to JuergeN:

A new entry in the config file could do the job.

Would you expect this entry in clear text, or SHA-256 encoded?
At the moment DM stores passwords only SHA-256 encoded.

[JuergeN]

I would expect to enter the password in plain text into the config-file. I would expect DM itself to calculate the SHA-256 ecoding from the given initial password and store the password in the db just like before.

[jri]

OK, let's do it this way.
Thanks.

[jri]

In ​https://github.com/jri/deepamehta/commit/7edbcace

Set initial admin password in config file (#943).

There is a new config property:

dm4.security.initial_admin_password

The initial password for the "admin" user account.
By default it is empty.

Note: this setting is only evaluated while the first DeepaMehta start.
Once started the admin password can be changed interactively (using the Webclient).

See #943.