removed db password from config.php