Update config.php

no secret set by default