readme.md + bugfix user password