update doc about username and password