move configuration from config.js to config.json and basic auth