delete config.js from repo (cp example on install if none) and fix cors interaction from client