Update index.php

don't include password here