Removed db.php includes (always included in handlers), add page security check.

Added config.php