servlet secret & configuration CORS, CSP, Database, Sharedb, Mailgun, tappay, paypal, social login, openid, ... etc code structure API external API bundler key nginx watcher