What about an admin-party mode, until a admin-password is set (like on couchdb) ? Would avoid a config-var to be set when deploying with the heroku-btn