fixes #7. add initial allowed domains
fixes #7. provide settings for running behind Proxy/SSL
document new settings