First-time setup

After setup, delete or protect setup.php if you do not need it.