updated readme to include password hashing details