context processor: add DEBUG to context
templates: split base into two parts
models: add SiteSettings.is_setup
setup-kegbot: add secret key
setup_wizard: online configuration for new systems.

Assume this will be used in a trusted environment. As such no effort has been
made to secure this step against potential attacks (sniffing plain HTTP traffic;
racing the legitimate user to take over the system.)