add docs for TICKET_MASK_* settings
add fallbacks for potentially unavailable CDNs