switch to pdo, remove passwords, etc

mysql interface is deprecated and should no longer be used. Config files should not be committed. .gitignore is your friend. PDO is almost always your friend in these situations.