Headmaster setup

Secure one-time setup. Requires the server token HEADMASTER_SETUP_TOKEN. Never hardcoded.