REST API now gets credentials from config.php