Make mp3 root configurable, explain crappy pw hashing, remove for...in loop