Global config is now made in config.php to avoid tampering with the index.php and AllowHttp can now also be overridden in a controller or action