fix login: referer is required
skip straight to config on initial run