[browser]
gatherUsageStats = false

[server]
enableCORS = true
enableXsrfProtection = false