added config notes to README, changed default MYSQL Password in config