Make entrypoint /settings/initialSetup not public for security reasons

🎉 Thank you for contributing!

Please make sure you already agreed to the CLA so this MR can be processed swiftly. Thanks!