added info on attributes and clean/smudge filter to remove password from config.js file on commit