improve password handling:
* setting passwords via node attribute will actually work
* setting passwords via data bags will actually work
* passwords are no longer stored in plain text on the remote host
* readme examples are more relevant