rename backends to config_backends
add hotlink prevention