Changed 'config.serve_static_assets' to FALSE because of security alert.