Specify that setPassword does not automatically save the model

I recently fell for issue #4 as well, and couldn't find this behaviour documented.