added note about changing usernames and passwords