Update config.php

Security fix