update readme with master_auth_pass option