password and config are now separated