fix suggessions from sensiolabs insight

Connected to the #254  ticket, fix some of the suggested sensiolabsinsight errors
not sure how much this is worth. i would prefer to ignore the warning from insight, but make a comment that you don't want to do this in a real application, and certainly don't want to use such stupid passwords :-)

but for understanding the demo, i think its nice to see things directly in the config.

what do others think?