Refactored setup to settings, split scripts

- Moved setup scripts into their own folder (/bac/setup/)
- Removed 'first run' login from settings
- Bug fixes for login, headers already sent issue
- Added util function to get 'absolute' BAC uris