Welcome!
I suggest to start with my config file, without rpc password at first.
Later, you can test more - and remove any wrong entry (provided you change not too much at once).
I use aria2web, it is easier to install and works well. Further it is easy to protect any access to this directory via webserver.
HTH
Newbiefan