Untrack settings file for security reasons
- removes CSRF (next step is to use an api token instead)
- generates settings if needed at launch