Create or reset the first admin login with the protected bootstrap token. After this, normal users sign in with email and password.