Update config.php

Moved password location to an ignored file.