Prefer hashed passwords instead of plain text

  * added 'password_hash' param for mongo::db
  * updated README.md
  * added test

Change-Id: Iebd226c44ca7d26a981457c9801ae79a949f684f