diff --git a/web/app/__init__.py b/web/app/__init__.py
new file mode 100644
index 000000000..e69de29bb
diff --git a/web/config.py b/web/config.py
index 538b2d224..e1b5163ce 100644
--- a/web/config.py
+++ b/web/config.py
@@ -15,6 +15,9 @@ from logging import *
 # Log settings
 ##########################################################################
 
+# Debug mode?
+DEBUG = true
+
 # Application log level - one of:
 #   CRITICAL	50
 #   ERROR	40
@@ -41,6 +44,17 @@ LOG_FILE = 'pgadmin4.log'
 # environment by the runtime
 DEFAULT_SERVER_PORT = 5050
 
+# Enable CSRF protection?
+CSRF_ENABLED = True
+
+# Secret key for signing CSRF data. Override this in config_local.py if 
+# running on a web server
+CSRF_SESSION_KEY = 'SuperSecret'
+
+# Secret key for signing cookies. Override this in config_local.py if 
+# running on a web server
+SECRET_KEY = 'SuperSecret'
+
 ##########################################################################
 # Local config settings
 ##########################################################################