Security tweak: don't check in DB connections!

Pulled the connection info out of db.php, into the non-checked-in
db_conn.php.  Copy db_conn.php.template to db_conn.php, and set the
params locally.

Technically this change isn't necessary, but doing it in case anybody
modifies the code in place and checks it back in.