change api names
use config instead of settings
added settings helpers
fix csrf reference
move more settings into CMS.config and added sideframe
decouple sideframe into CMS.Sideframe()