Doc update
Don't store plaintext passwords.

Although this is not security-sensitive, storing plaintext passwords
is a bad habit. Hash them using standard Unix crypt(3). Clean up some
tests.
Adding .gitignore