adding comments in config and disabling gii for seccurity