Disable the creation of the demo users by default

[cdamken]

By default, the demo users are enabled,

I would propose by default to have:

      ACCOUNTS_DEMO_USERS_AND_GROUPS: false

and only if the developers want to have a testing environment could be enabled.

Otherwise, this could produce a security issue if someone forgets it.

Acceptance criteria
[ ] demo users are not created when starting oCIS out of the box (docker, binary)
[ ] getting started doc needs adjustments
[ ] test deployments need to enable demo users explicitly
[ ] tests in web repository need to be adapted (eg. check if they still work)
[ ] deployments in web repository need to be checked
[ ] enable demo user in VS code launch config
[ ] setting service doesn't assign roles to demo users if flag is set to false

[micbar]

Thanks carlos for pointing it out.

IMO we should solve this during build time. The locally self compiled binary should still have the demo users, and the docker image and the official binary should set the value to false

[wkloucek]

To have a secure oCIS instance, there is more than deleting the demo users. I agree on having them disabled by default for released binaries as soon as were in Beta.

But we should also find a solution for the default secrets (https://owncloud.dev/ocis/deployment/#secure-an-ocis-instance), at least for the single process use case.