add section to readme on passwords