Update config.xml

removing credentials