Security fix. Shifted plain text password into config.py