adding config var for password