Strip password from config.php; add .htaccess & .gitignore

- This was left in the clear from webApps project
- Fixed by:
  @ delete history of this file in git's tree
  @ overwrite github's history
  @ separate sensitive info into separate ini file
  @ .gitignore the .ini and .htaccess protect it
 (@ and obviously change the db username & password)
- NB: I'm a novice at this, so if this is still insufficient,
      send me an email.