Update config.php

changed salt, removed secure cookies, fixed csrf