README shows hardcoded password