better config file
fix for forgot password