refactored how the app loads config so we can specify password at a secure prompt if not supplied in the file