updated config to use a password