Added SETUP env flag to enable config-based login; Started work on security enhancements; Added notes for other features;