remove password from web config