structured config.json file better - closes #47, do not expose server config to client - closes #23