Update README, add description about managing db password