changed config to serve static assets, fixed attempt session bug