changes to plugin.yml

this allow a more "friendly" approach to a security system. using a password might seem "harsh", so instead of using password, use their username. this reduces the risk of bots + it seams more friendly (while providing a password based system, disguised as a username based system). Thanks, ProSniper234