Renamed the wp-config sample to the actual file. Updated readme and added htaccess to disallow accessing of wp-config.php