route .well-known properly, remove unused cf ports