Added params about user passwords to API docs