remove passwords in config/database.yml