freezing external packages for safety reasons
new url config parameters available and defaultUser config option is available...