[server]
enableCORS = false
enableXsrfProtection = false