moving app settings out to config file -- though most of it shouldn't actually be changed, there are a few k/v (like mailer relay) that highly installation-dependent
so, uh, jquery's cdn doesn't respond to https? i would not have expected that