system property qmon.config now mandatory. cross origin requests disabled by default