1. Setup redirect flow (setup -> loading -> login):
- Add /loading to exempt paths
- Redirect setup to login after completion
- Redirect loading to login when initialization complete
2. Close pages after completion:
- Block access to /setup after setup is done
- Block access to /loading after initialization complete
- Proper redirect handling prevents re-access
3. Fix WebSocket 403 error:
- Change /ws/progress to /ws/connect (correct endpoint)
- Add /ws/connect to exempt paths
- Subscribe to 'system' room for progress updates
- Fix message data handling format