Got the user config coming from a server now as a JSON response. Found a bug where scripts still get injected into the page if the user is logged in and the URL matches the login page regex, going to have to add checks for cookies being set to remedy this