First-run setup

// pick an app password