better config

added credentials to config.xml