[browser] gatherUsageStats = false [global] developmentMode = false [server] enableCORS = false enableXsrfProtection = false