remove console log
don't track cms.conf.js because it will have sensitive credentials inside
basic doc on workflow
working thrid party auth with cookie + config