security impovements and use of config.ini for store user credentials