config.json added, password is prompted when app is run