We use mod_rewrite for cleaner urls. Nix the index.php.
Include the profiler toolbar on the development environment.
Don't support SSL globally.
Default timezone to Indianapolis as this is where the organization is at.
If we support authentication via the web, it is done with a username, not an email address.
Turn on global logging.
Expire sessions on tab/browser closing.
Name the cookie session to irexinc.org.
Comment out non-used config settings. Convert all the config files to spaces instead of tabs.
Convert all files from tabs to 2 spaces.