Update config.php

use simplified session auth