reorganize app.rb so configs come first and basic security stuff is on the bottom