Finally rooted!
This was my first hard box and therefore also took longer time to complete.
The whole journey was worth it in the end, even though someone changed the cms login password - took some extra time, but thanks to @plackyhacker for acknowledging my attempt path was correct.
So tips for you who are stuck.
User1: enumerate and when you find it, get it and extract what you need
User2: I so overcomplicated this. Read about how the app is working and when you know - modify it.
Root: if you have read the file, which you most certainly have by now, you will know what to do.
Thanks for a great box!