using conf file to store passwords and sensitive data