Fix issue with ability to create admin user by setting referrer

routes/user.js

@@ -146,8 +146,12 @@ router.post('/admin/user/insert', common.restrict, (req, res) => {
     // set the account to admin if using the setup form. Eg: First user account
     let urlParts = url.parse(req.header('Referer'));
 
+    // Check number of users
+    db.users.count({}, (err, userCount) => {
         let isAdmin = false;
-    if(urlParts.path === '/admin/setup'){
+
+        // if no users, setup user as admin
+        if(userCount === 0){
             isAdmin = true;
         }
 
@@ -199,5 +203,6 @@ router.post('/admin/user/insert', common.restrict, (req, res) => {
             });
         });
     });
+});
 
 module.exports = router;