update database.yml for security