- remove web/config.php for security reasons