writing password into settings.yml and update readme