[server]
enableXsrfProtection = false
enableCORS = false