Hookin setup api endpoint, error if invalid post

Author: Ilya Radchenko

lib/app.js

@@ -254,6 +254,7 @@ var init = exports.init = function (config) {
 
   app.get('/api/session', api_session.get);
   app.post('/api/session', api_session.create);
+  app.use('/api/setup', require('./routes/api/setup'));
 
 
   app.use(function(req, res, next) {

lib/routes/api/setup.js

@@ -13,6 +13,10 @@ router.post('/', function (req, res) {
   var configData = req.body;
   var userData = configData.admin;
 
+  if (!configData || !userData) {
+    return res.status(400).send('Invalid post data');
+  }
+
   Upgrade.needConfigObj(function (err, needsConfig) {
     if (err) {
       return res.status(500).send('Database error');