[keycloak-user] keycloak.js correct usage

Hey, having 2 issues using the keycloak.js correct. As for now i deployed my keycloak.json in the WEB-INF folder, but keycloak.js needs it accessible so i have to put it outside of WEB-INF. This forces me to have it two times, is this correct? If I login to my test site which is essentially the view.html of the demo-template/customer-app-js example I'm forced to relogin. This is as far as I can tell due to the keycloak.init({ onLoad: 'login-required' }) "login-required" if i just call keycloak.init(), keycloak doesnt retrieve a token at all. How do i use this api correctly? Bonus Question: the "myapp/k_query_bearer_token " return an HTTP 200 but no token. i thought this one could have been an alternative to keycloak.js Thanks