Users are stored in the database. On a clean installation, the first admin is bootstrapped from `.env`.