adding a global config manager
add config for sessions secret and auth enabled/disabled
cleanup
update the readme, about the new local-config.json