more about passwords in readme