password goes here, you should keep this folder outside web root though
