Remove one more direct access to config.py

Also change default password length to 8