[server] enableXsrfProtection = false enableCORS = false [browser] gatherUsageStats = false