use phpass to store passwords
headers module is only needed when dealing with reverse proxies
removed note about plain-text passwords since it's not the case anymore
removed unnecessary .gitkeep file