Make being superadmin configurable
-
The "superadmin"-access should not be tied to one hard-coded account, but should be configurable.
-
We probably need a new attribute for the account.
-
And we must check that no one can "remove" the last superadmin-enabled account.