use a config struct to hold the keys we'll be using to limit URL access