#4: update config file so ad admin/password is in secret ENV file instead on github