patched security holes

removed plain text passwords from config file (I really can't believe I did this).