remove unused directory creations, add user workdir
security risk to include api-config in user repo, and hard to make paths work