Update Readme to not use plain-text passwords

Update the readme documentation to not store passwords as plain-text (or at least not require them to be stored as plain text).

The code is taken directly from  the [Passport-Local readme](https://github.com/jaredhanson/passport-local#configure-strategy), so it is not new.