rename disable signout prompt
allow cors origins to be set via initializer