Start Setup Instructions

and add disclaimer on making app secret public