refactoring setup controller and lib/app.js to have the set_root_password not be a part of the mainstream setup flow anymore