Added a insecure express-app and the config.