security, extracted database config to separate class