Update cfg.py

Never allow HTTPS or autobrowser