Allow setting config via app.set() at runtime

config.js is now optional

closes #5